5.74.111.130
Classification: Malicious
5.74.111.130 is a malicious IP address in Tehran, IR. Reported by 3 threat sources (SSH Attacker, Mail Spammer), last seen 2026-10-17.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2026-10-17 13:59:38 | 2026-10-17 13:59:38 | attacker malicious-activity | |
| SSH Attacker | Blocklist.net.ua | 2018-03-22 07:43:18 | 2018-03-22 07:43:18 | ||
| SSH Attacker | Blocklist.de | 2018-03-21 08:03:22 | 2018-03-21 08:03:22 |
Tags
ssh bruteforce bot abuseWhois information
- AS name
- AS58224 Telecommunication Company of Tehran
- AS registry
- ripencc
- AS date
- 2012-06-11 00:00:00
- AS CIDR
- 5.74.0.0/17
- Registrant
- Telecommunication Company of Tehran
- City
- Tehran
- Postal code
- 1145933187
- Country
- IR — Iran, Islamic Republic of 🇮🇷
- First indexed
- 2018-03-21 08:03:22
- Last updated
- 2026-10-17 13:59:39
Malicious IPs in the same CIDR
5.74.127.180 5.74.113.206 5.74.126.106 5.74.111.130 5.74.76.247